Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnly/openWorld/idempotent annotations, the description discloses commitment level (confirmed), pagination terminus (next_before null on last page), memo truncation cap (200 chars), latency (0.3-2 s), pricing and free-tier limits, distinct 422/503 error semantics with no-charge guarantees, and a prompt-injection warning on returned on-chain strings. This is unusually rich behavioral context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.